fix: address security and reliability issues found in code review

[abonami]

• strategy_registry: add isSafeStrategyName() to reject names with path traversal chars; add isPathWithinStrategiesDir() to confine file loads to var/strategies/; remove arbitrary direct-file-path resolution branch
• bot_runner: attach .catch() handlers to both the initial and recurring onTick() calls so async errors are logged instead of silently swallowed
• services: fix loose equality (== → ===) for mail port 465 check
• services: replace console.log with this.getLogger().info() for Telegram missing-token warning so the message goes through the structured logger
• services: surface config-load errors with console.warn including the file path and error details instead of silently falling back to {}

https://claude.ai/code/session_01MAw1iz4srnJs7oBbqFPwZg